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DETAILED ACTION 

1. This is in response to the amendment filed on 16 August 2006. 

2. Claims 1-11 are pending in the application. 

3. Claims 1-11 have been rejected. 

Response to Arguments 

4. Applicant's arguments with respect to claims 1-11 have been considered but are moot 
in viev^ of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 112 
The following is a quotation of the first paragraph of 35 U.S.C. 1 12: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

5. Claims 1-11 are rejected under 35 U.S.C. 112, first paragraph, as failing to comply 
with the written description requirement. The claim(s) contains subject matter which was 
not described in the specification in such a way as to reasonably convey to one skilled in 
the relevant art that the inventor(s), at the time the application was filed, had possession 
of the claimed invention. 

Independent claims 1 and 11 have been amended to include the limitations of 
"said authentication comprising temporary deactivation which adds authorization patterns 
prior to said operation" and "non split-key". Neither of these limitations are supported by 
the specification as originally disclosed. 
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Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent granted 
on an application for patent by another filed in the United States before the invention by the applicant 
for patent, except that an international application filed under the treaty defined in section 351(a) shall 
have the effects for purposes of this subsection of an application filed in the United States only if the 
international application designated the United States and was published under Article 21(2) of such 
treaty in the English language. 

6. Claims 1-4, 10 and 11 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Tayloe U.S. Patent No. 5,933,785. 

As to claim 1, Tayloe discloses a method for setting basic means of access for 
operation of devices of which the operation is controllable by electronic means, 
comprising: 

the devices comprising mobile phones, small computer-controlled 
consumer devices with relatively low level of computing power, 
computers, motor vehicles, control terminals for industrial processes, all of 
which devices may require authentication prior to operation [column 2 line 
59 to column 3 line 7], the authentication comprising temporary 
deactivation which adds authorization patterns prior to the operation 
[column 6, lines 27-34]; 

establishment of a non split-key link between a personal 
authentication system supplied with encryption data and a logic system 
able to control an electronic device control, the encryption data being 



Application/Control Number: 09/667,0 1 0 Page 4 

Art Unit: 2131 

stored solely in the authentication system, the link between the 
authentication system and the device being via wired or wireless means 
[column 3, lines 39-49]. 

checking the encryption data in the authentication system prior to 
operation of the electronic device control [column 3, lines 39-49]; 

assignment of a plurality of predetermined means of access to the 
electronic device control associated with the authentication system the 
predetermined means providing access to physical hardware resources and 
access to different software functions, based on the privileges of the user 
who identified himself to the system, the software fimction evaluates a 
security token and is running on top of the physical hardware [column 2 
line 59 to column 3 line 7]; 

enabling of the means for access predetermined for the 
authentication system dependent on the result of the check [column 2 line 
59 to column 3 line 7]. 
As to claim 2, Tayloe discloses that the basic means of access to ftinctions of the 
device comprise at least one of the following means: disable operation of the devices, 
enable operation of the devices, or enable configuration of the devices [column 2 line 59 
to column 3 line 7]. 

As to claim 3, Tayloe discloses that the link is made without need for intermediate 
software layers [column 2 line 59 to column 3 line 7]. 

As to claim 4, Tayloe discloses in addition, the step of reading at least one of the 
following features embodied within the authentication system: firmware programs. 
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device-specific command sequences for execution of specific device-specific functions, 
cryptographic keys, cryptographic algorithms, and individual decision-making logic 
[column 3, lines 39-49], 

As to claim 10, Tayloe discloses program code areas for the execution or 
preparation for execution of the steps when the program is installed in a computer 
[column 2 line 59 to column 3 line 7]. 

As to claim 11, Tayloe discloses a method for setting basic means of access for 
operation of devices of v^hich the operation is controllable by electronic means, 
comprising: 

the devices comprising computer-controlled consumer devices 
with relatively low level of computing power, computers, motor vehicles, 
control terminals for industrial processes, all of which devices may require 
authentication prior to operation the authentication comprising 
deactivation which adds authorization patterns prior to the operation 
[column 2 line 59 to column 3 line 7]; 

establishment of a non split-key link between a personal 
authentication system supplied with encryption data and a logic system 
able to control an electronic device control, the encryption data being 
stored solely in the authentication system, the link between the 
authentication system and the device being via wired or wireless means 
[column 3, lines 39-49]. 

checking the encryption data in the authentication system prior to 
operation of the electronic device control [column 3, lines 39-49]; 
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assignment of a plurality of predetermined means of access to the 
electronic device control associated with the authentication system the 
predetermined means providing access to physical hardware resources and 
access to different software ftmctions, based on the privileges of the user 
who identified himself to the system, the software fimction evaluates a 
security token and is running on top of the physical hardware [column 2 
line 59 to column 3 line 7]; 

enabling of the means for access predetermined for the 
authentication system dependent on the result of the check [column 2 line 
59 to column 3 line 7]. 

the method providing means of no access or ftill access and allow 
more finely defined levels of access as defined in a user profile for 
configuration or maintenance work [column 2 line 59 to column 3 line 7]. 
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Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 5-9 are rejected under 35 U.S.C. 103(a) as being unpatentable over Tayloe 
U.S. Patent No. 5,933,785 as applied to claim 1 above, and further in view of Findikli 
et al U.S. Patent No. 6,415,144 Bl. 

As to claim 5, Tayloe does not teach that the method includes configuration of the 
devices, by authorized persons. Tayloe does not teach that after successful 
authentication, device-specific configuration data are downloaded into the devices from 
the authentication system in accordance with the authentication systems or over a 
network. 

Findikli et al teaches configuration of the devices, by authorized persons [column 
1 line 61 to column 2 line 5]. Findikli et al teaches that device-specific configuration 
data are downloaded into the devices from the authentication system in accordance with 
the authentication systems or over a network [column 1 line 61 to column 2 line 5]. 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to have modified Tayloe so that the method would 
have included configuration of the devices, by an authorized persons. After successfiil 
authentication, device-specific configuration data would have been downloaded into the 
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devices from the authentication system in accordance with the authentication systems or 
over a network. 

It would have been obvious to a person having ordinary skill in the art at the time 
the invention was made to have modified Tayloe by the teaching of Findikli et al because 
over-the-air teleservices provide the radio telecommunications system operators with 
greater flexibility in tailoring wireless devices to meet the needs of their subscribers 
[column 2, lines 6-10]. 

As to claim 6, Tayloe teaches execution setting basic means of access for 
operations [column 2 line 59 to column 3 line 7]. 

As to claim 7, Tayloe teaches authentication of a person or a group of people 
[column 2 line 59 to column 3 line 7]. 

As to claim 8, Tayloe teaches that the authentication system is implemented in the 
form of a Smartcard [column 2 line 59 to column 3 line 7]. 

As to claim 9, Tayloe teaches setting basic means of access for operation of 
devices of which the operation is controllable by electronic means, including at least one 
device and an authentication system [column 2 line 59 to column 3 line 7]. 
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Conclusion 

8. Applicants amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated fi-om the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aravind K. Moorthy whose telephone number is 571-272- 
3793. The examiner can normally be reached on Monday-Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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